ID: 28556
User updated by: floeff at arcor dot de
Reported By: floeff at arcor dot de
-Status: Feedback
+Status: Open
Bug Type: CGI related
Operating System: Linux 2.4
PHP Version: 4.3.6
New Comment:
It was the Debian 3.0 package, version 1.1.3-6.3
Previous Comments:
------------------------------------------------------------------------
[2005-03-02 23:21:28] sniper@php.net
What libmm version do you have installed?
(I can't reproduce this with latest stable CVS and libmm-1.3.1)
------------------------------------------------------------------------
[2005-03-01 19:23:06] floeff at arcor dot de
I already tried without binfmt_misc, same problem. Regarding the
snapshot: Unfortunately, I have no testing machine at the moment, and
after removing that mm stuff, it works fine. I will get back to you if
I have a testing machine again someday, but feel free to test it out
yourself and ask whatever question you have.
------------------------------------------------------------------------
[2005-03-01 01:59:59] sniper@php.net
Please try using this CVS snapshot:
http://snaps.php.net/php4-STABLE-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php4-win32-STABLE-latest.zip
And please try without using this binfmt_misc module to rule out THAT
possible cause of this bug.
------------------------------------------------------------------------
[2005-02-06 14:27:36] floeff at arcor dot de
Okay, here we go:
./configure --enable-safe-mode --with-mysql --enable-discard-path
--with-exec-dir --enable-memory-limit --with-mm && make && make
install
cp php.ini-dist /usr/local/lib/php.ini
echo ':PHP:E::php::/usr/local/bin/php:' >
/proc/sys/fs/binfmt_misc/register
echo ':PHP3:E::php3::/usr/local/bin/php:' >
/proc/sys/fs/binfmt_misc/register
echo ':PHP4:E::php4::/usr/local/bin/php:' >
/proc/sys/fs/binfmt_misc/register
Changes in php.ini:
expose_php = Off
disable_functions = phpinfo
allow_url_fopen = Off
In httpd.conf of Apache2:
AddHandler cgi-script .cgi .pl .php .php3 .php4
------------------------------------------------------------------------
[2005-02-06 06:57:15] sniper@php.net
Come up with configuration that isn't "security threat" to you and put
it here..
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/28556--
Edit this bug report at http://bugs.php.net/?id=28556&edit=1